@article {24196,
	title = {  Risk Assessment of a National Security Infrastructure},
	journal = {IEEE Security \& Privacy},
	volume = {7},
	year = {2009},
	pages = {34-41},
	publisher = {IEEE},
	abstract = {In Norway, BankID is the banking industry{\textquoteright}s public-key infrastructure (PKI) of choice for authenticating Internet customers. But do BanklD{\textquoteright}s differences from standard PKIs make it a riskier choice? This assessment, based on both publicly available information and usage experiences, addresses that question.},
	keywords = {bank data processing, Internet, public key cryptography},
	doi = {10.1109/MSP.2009.17},
	author = {Kjell J{\o}rgen {Hole} and Klingsheim, A.N. and Netland, L.-H. and Espelid, Y. and Tjostheim, T. and Moen, V.}
}
@article {24201,
	title = {Challenges in securing networked J2ME applications},
	journal = {IEEE Computer},
	volume = {40},
	year = {2007},
	pages = {24-30},
	publisher = {IEEE},
	abstract = {An increasing number of smart phones support Java 2, Micro Edition. Mobile application developers must deal with J2ME{\textquoteright}s inherent security weaknesses as well as bugs in implementations on real devices. The new Security and Trust Services API for J2ME addresses some of these challenges, although it too has shortcomings.},
	keywords = {application program interfaces, Java, mobile computing, security of data},
	doi = {10.1109/MC.2007.49},
	author = {Klingsheim, A.N. and Moen, V. and Kjell J{\o}rgen {Hole}}
}
@article {24202,
	title = {Lessons from the Norwegian ATM System},
	journal = {IEEE Security \& Privacy},
	volume = {5},
	year = {2007},
	pages = {25-31},
	publisher = {IEEE},
	abstract = {This case study focuses on real-world ATM card misuse, illustrating how too much secrecy led to a deterioration of PIN-based authentication procedures, and why a bank{\textquoteright}s refusal to share technical information is a threat to customers during a conflict.},
	keywords = {automatic teller machines, message authentication},
	doi = {10.1109/MSP.2007.168},
	author = {Kjell J{\o}rgen {Hole} and Moen, V. and Klingsheim, A.N. and Tande, K.M.}
}
@article {24233,
	title = {Vulnerabilities in E-Governments},
	journal = {International Journal of Electronic Security and Digital Forensics},
	volume = {1},
	year = {2007},
	pages = {89-100},
	publisher = {InderScience Publishers},
	abstract = {This paper shows that more than 80\% of the E-Governments in the world are vulnerable to common Web-application attacks such as Cross Site Scripting and SQL injection. Industrialized countries were found to be more vulnerable than under-developed countries (90\% vs. 50\%). The paper also describes some malicious data mining possibilities on the Norwegian E-Government, and how information can be combined and used to create other practical attacks.},
	keywords = {cross site scripting, e-government, Electronic government, electronic security, Privacy, SQL injection, vulnerabilities, web application attacks},
	doi = {10.1504/IJESDF.2007.013595},
	author = {Moen, V. and Klingsheim, A.N. and Simonsen, K.I.F. and Kjell J{\o}rgen {Hole}}
}
@article {24211,
	title = {Case study: online banking security},
	journal = {IEEE Security \& Privacy},
	volume = {4},
	year = {2006},
	pages = {14-20},
	publisher = {IEEE},
	abstract = {A description of attack scenarios over a two-year period illustrates several key security issues with Internet banking systems in Norway. Given the banks{\textquoteright} security-by-obscurity policy, online customers knew little about security levels and falsely believed their assets were safe.},
	doi = {10.1109/MSP.2006.36},
	author = {Kjell J{\o}rgen {Hole} and Moen, V. and Tjostheim, T.}
}
